https://bugs.kde.org/show_bug.cgi?id=521329
--- Comment #4 from John <[email protected]> --- I inserted 'Y' and pressed Enter to times to upload the report, something that maybe Discover should have too in the future, but only when the user has decided to send feedback to developers in with that option. The there were these commands with their outpus: 'sudo fwupdmgr refresh': Metadata is up to date; use --force to refresh again. 'sudo fwupdmgr get-updates': Devices with no available firmware updates: • Key Exchange Key • Option ROM UEFI CA • SBAT • ST1000LM035-1RK172 • UEFI DB • WD Blue SN570 1TB • Windows Production PCA Devices with the latest available firmware version: • System Firmware • UEFI CA • UEFI dbx Dell Inc. Inspiron 5770 │ └─KEK CA: │ Device ID: b7a1d3d90faa1f6275d9a98da4fb3be7118e61c7 │ Current version: 2011 │ Vendor: Microsoft (UEFI:Microsoft) │ URL: https://fwupd.github.io/libfwupdplugin/uefi-db.html │ Update State: Failed │ Update Error: failed to write-firmware: failed to write (null): failed to write data to efivarsfs: Error writing to file descriptor: Invalid argument │ Last modified: 2026-06-11 11:12:57 │ GUIDs: 814e950f-1449-566a-a190-42c9d3a3a2df ← UEFI\VENDOR_Microsoft&NAME_Microsoft-KEK-CA │ dfa66406-6568-5bdf-bb8e-b53ddb4be4cf ← UEFI\CRT_9F402B1CC0243CBEDC58A525789816CCCA7687A9 │ Device Flags: • Internal device │ • Updatable │ • Supported on remote server │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ • Signed Payload │ • Can tag for emulation │ └─Secure Boot KEK Configuration Update: New version: 2023 Remote ID: lvfs Release ID: 113921 Summary: UEFI Secure Boot Key Exchange Key Variant: Dell License: Proprietary Size: 2.9 kB Created: 2025-04-29 00:00:00 Urgency: High Vendor: Linux Foundation Release Flags: • Trusted metadata • Is upgrade Description: This updates the UEFI Signature Database (the "KEK") to the latest release from Microsoft, signed by Dell Inc.Platform Key. Checksum: 8c6f7c473afceac2bd26b1598e26991f710875cc25d0ce08cbe0a90867ea9914 ------------------------------------ The right column of this line: "Update Error: failed to write-firmware: failed to write (null): failed to write data to efivarsfs: Error writing to file descriptor: Invalid argument" Is in red color. Seems to be exactly the same error that Discover is showing! And looking at the description below the command, on Github, this command should just check for updates, not also try to download and install them: "If updates are available for any devices on the system, they'll be displayed." This is strange! If the above command that should only look for updates failed with an error like it was trying to also install them, I ondered what the actually command for installing them would do, so I tried next this command: 'sudo fwupdmgr update', which showed this output: ╔══════════════════════════════════════════════════════════════════════════════╗ ║ Upgrade KEK CA from 2011 to 2023? ║ ╠══════════════════════════════════════════════════════════════════════════════╣ ║ This updates the UEFI Signature Database (the "KEK") to the latest release ║ ║ from Microsoft, signed by Dell Inc.Platform Key. ║ ║ ║ ╚══════════════════════════════════════════════════════════════════════════════╝ Perform operation? [Y|n]: I inserted an Y and I'm pressing Enter now. If I don't write any other comment next, then something really bad happened. -- You are receiving this mail because: You are watching all bug changes.
